2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2854 | HIGH | 8.8 | 0.7% | Sep 26, 2022 | Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit ... |
| CVE-2022-2853 | HIGH | 8.8 | 1.8% | Sep 26, 2022 | Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had ... |
| CVE-2022-2852 | HIGH | 8.8 | 2.5% | Sep 26, 2022 | Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap c... |
| CVE-2022-40785 | HIGH | 8.8 | 2.0% | Sep 26, 2022 | Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This all... |
| CVE-2022-3103 | HIGH | 7.8 | 0.3% | Sep 26, 2022 | off-by-one in io_uring module. |
| CVE-2022-3204 | HIGH | 7.5 | 1.3% | Sep 26, 2022 | A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolv... |
| CVE-2022-39245 | HIGH | 7.8 | 0.2% | Sep 26, 2022 | Mist is the command-line interface for the makedeb Package Repository. Prior to version 0.9.5, a user-provided `sudo` bi... |
| CVE-2022-40928 | HIGH | 7.2 | 0.8% | Sep 26, 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_applica... |
| CVE-2022-40927 | HIGH | 7.2 | 0.8% | Sep 26, 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designa... |
| CVE-2022-40926 | HIGH | 7.2 | 0.8% | Sep 26, 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_t... |
| CVE-2022-40925 | HIGH | 7.2 | 0.9% | Sep 26, 2022 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" fi... |
| CVE-2022-40924 | HIGH | 7.2 | 1.0% | Sep 26, 2022 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" f... |
| CVE-2022-40404 | HIGH | 8.8 | 0.8% | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php. |
| CVE-2022-40403 | HIGH | 7.2 | 0.8% | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit... |
| CVE-2022-40402 | HIGH | 8.8 | 0.8% | Sep 26, 2022 | Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_... |
| CVE-2022-3295 | HIGH | 7.5 | 0.9% | Sep 26, 2022 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| CVE-2022-3119 | HIGH | 7.5 | 0.4% | Sep 26, 2022 | The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its set... |
| CVE-2022-3076 | HIGH | 7.2 | 1.1% | Sep 26, 2022 | The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary file... |
| CVE-2022-2987 | HIGH | 7.5 | 0.4% | Sep 26, 2022 | The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF ... |
| CVE-2022-2903 | HIGH | 7.2 | 1.1% | Sep 26, 2022 | The Ninja Forms Contact Form WordPress plugin before 3.6.13 unserialises the content of an imported file, which could le... |
| CVE-2022-2352 | HIGH | 7.2 | 1.0% | Sep 26, 2022 | The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, wh... |
| CVE-2022-36159 | HIGH | 8.8 | 0.9% | Sep 26, 2022 | Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the compo... |
| CVE-2022-36158 | HIGH | 8 | 1.4% | Sep 26, 2022 | Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which a... |
| CVE-2022-41347 | HIGH | 7.8 | 0.4% | Sep 26, 2022 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the z... |
| CVE-2022-41343 | HIGH | 7.5 | 4.1% | Sep 25, 2022 | registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure doe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now